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~ The MAILING DATE of this communication appears on the cover sheet with the correspondence address — 
Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 

- Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1 .704(b). 

Status 

1)K Responsive to communication(s) filed on 18/5/04 . 
2a)S This action is FINAL. 2b)Q This action is non-final. 

3) Q Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 
closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 

Disposition of Claims 

4) ^ Claim(s) 1-3 1 is/are pending in the application. 
4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) S Claim(s) 1-9.15-25.30 and 31 is/are rejected. 

7) [3 Claim(s) 10-14 and 26-29 is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) E3 The drawing(s) filed on 06 June 2000 is/are: a)S accepted or b)D objected to by the Examiner. 
Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 

11) D The proposed drawing correction filed on is: a)D approved b)D disapproved by the Examiner. 

If approved, corrected drawings are required in reply to this Office action. 

12) D The oath or declaration is objected to by the Examiner. 
Priority under 35 U.S.C. §§119 and 120 

13) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 
a)DAII b)D Some*c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

20 Certified copies of the priority documents have been received in Application No. . 

30 Copies of the certified copies of the priority documents have been received in this National Stage 
application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 

14) D Acknowledgment is made of a claim for domestic priority under 35 U.S.C. § 1 19(e) (to a provisional application). 

a) □ The translation of the foreign language provisional application has been received. 

15) D Acknowledgment is made of a claim for domestic priority under 35 U.S.C. §§ 120 and/or 121 . 

Attachment(s) 

1 ) ^ Notice of References Cited (PTO-892) 4) □ Interview Summary (PTO-41 3) Paper No(s). . 

2) Q Notice of Draftsperson's Patent Drawing Review (PTO-948) 5) □ Notice of Informal Patent Application (PTO-152) 

3) O Information Disclosure Statement(s) (PTO-1 449) Paper No(s) . 6) [H Other: 
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DETAILED ACTION 



Claim Rejections - 35 USC § 103 



1. 



The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 



obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

2. This application currently names joint inventors. In considering patentability of the 
claims under 35 U.S.C. 103(a), the examiner presumes that the subject matter of the various 
claims was commonly owned at the time any inventions covered therein were made absent any 
evidence to the contrary. Applicant is advised of the obligation under 37 CFR 1 .56 to point out 
the inventor and invention dates of each claim that was not commonly owned at the time a later 
invention was made in order for the examiner to consider the applicability of 35 U.S.C. 103(c) 
and potential 35 U.S.C. 102(e), (f) or (g) prior art under 35 U.S.C. 103(a). 

3. Claims 1-3, 8, 15-18, 20, 24 and 30-31 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Wong (US 6,700,891) in view ofHeddaya et al (US 6,622,157). 

For claim 1, Wong discloses apparatus and method for providing a device level security 
mechanism in a network, the method comprising: 

specifying at least one packet filtering criterion (figure 5 A, reference 76, col. 5 lines 50- 



transmitting one or more data packets meeting the at least one criterion (figure 2, 
references 22-1 to 22-6) through the network (figure 1, reference 10) from one of the end-point 
to another (col. 4 lines 45-47); 



52); 
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intercepting at least one of the data packets meeting the criterion (figure 6, reference step 
1 12) using the network agents (figure 1, reference 18) at one or more of the respective locations 
in the network traversed by the at least one of the data packets (col. 7 lines 21-25); 

recording information regarding the at least one intercepted packet at the one or more 
respective locations (figure 6, reference step 120, col. 7 lines 40-41); and 

processing the recorded information to analyze a route of the at least one intercepted 
packet through the network (col. 7 lines 46-50). 

However, Wong does not disclose using the network agents at intermediate the end- 
points. In an analogous art, Heddaya et al disclose using the network agents (figure 1, references 
14) at intermediate the end-points (col. 7 lines 20-21). One skilled in the art would have 
recognized using the network agents at intermediate the end-points to use the teachings of 
Heddaya et al in the system of Wong. Therefore, it would have been obvious to one of ordinary 
skill in the art at the time of the invention, to use the network agents at intermediate the end- 
points as taught by Heddaya et al in Wong's system with the motivation being inspected 
document request message packets as they fly-by and intercepted any request for which it may 
be possible to fulfill by providing a cached document instead (col. 7 lines 51-54). 

For claim 2, Wong discloses wherein specifying the at least one packet filtering criterion 
(figure 5 A, reference 76) comprises specifying a pattern of data to appear in the one or more 
packets to be transmitted (col. 5 lines 63-66). 

For claim 3, Wong discloses wherein specifying the at least one packet filtering criterion 
(figure 5 A, reference 76) comprises specifying information associated with a data protocol in 
accordance with which the packets are to be transmitted (col. 5 lines 63-66). 
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For claim 8, Wong disclose wherein the network agents comprise software processes 
running on nodes of the network at the respective locations (figure 1, reference 18, col. 7 lines 
42-44). 

For claim 1 5, Wong discloses wherein processing the recorded information comprises 
determining which of a plurality of links in the network were traversed by the at least one 
intercepted packet (col. 7 lines 46-50). 

For claims 16-17 and 30, Wong discloses apparatus and method for providing a device 
level security mechanism in a network, the method comprising: 

one or more network agents (figure 1, reference 18), adapted to be coupled to the network 
(reference 10) at respective locations (col. 4 lines 28-30) and to intercept data packets 
transmitted from one of the end-points to another that meet a predetermined packet filtering 
criterion (figure 6, reference step 112) and traverse the respective locations (col. 7 lines 21-25), 
and to record information regarding the intercepted data packets (figure 6, reference step 120, 
col. 7 lines 40-41); and to cause one or more data packets meeting the criterion (figure 2, 
references 22-1 to 22-6) to be transmitted through the network (figure 1, reference 10) from one 
of the end-points to another (col. 4 lines 45-47), and to process the information recorded by the 
network agents (reference 18) in order to analyze a route of the at least one intercepted packet 
through the network (figure 1, reference 10, col. 7 lines 46-50). 

However, Wong does not disclose the network at respective locations intermediate the 
end-points. In an analogous art, Heddaya et al disclose the network at respective locations 
intermediate the end-points (col. 7 lines 20-21); and a testing center (figure 2, reference 120), 
configured to convey the criterion to the network agents (figure 1, reference 14, col. 8 lines 38- 
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42 and col. 9 lines 6-11). Heddaya et al disclose at least one traffic agent (figure 1, reference 14), 
which is configured to receive instructions from the testing center (figure 1, reference 20) (col. 8 
lines 38-42 and col. 9 lines 6-11) and, responsive thereto, to transmit the packets meeting the 
criterion from the one of the end-points to the other (col. 8 lines 1 1-15 as set forth in claim 17); 
wherein the testing center (figure 1, reference 20) is operative to determine which of the links in 
the network were traversed by the at least one intercepted packet (col. 8 lines 1 1-17 as set forth 
in claim 30). 

One skilled in the art would have recognized using the network agents at intermediate the 
end-points to use the teachings of Heddaya et al in the system of Wong. Therefore, it would have 
been obvious to one of ordinary skill in the art at the time of the invention, to use the network 
agents at intermediate the end-points as taught by Heddaya et al in Wong's system with the 
motivation being inspected document request message packets as they fly-by and intercepted any 
request for which it may be possible to fulfill by providing a cached document instead (col. 7 
lines 51-54). 

For claim 18, Wong discloses wherein the packet filtering criterion (figure 5 A, reference 
76) comprises a pattern of data that is included in the packets transmitted by the at least one 
traffic agent (col. 5 lines 63-66). 

For claim 20, Wong discloses wherein the packet filtering criterion (figure 5 A, reference 
76) comprises information associated with a data protocol in accordance with which the traffic 
agent transmits the packets (col. 5 lines 63-66). 
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For claim 24, Wong discloses wherein the network agents comprise software processes 
running on the nodes of the network at the respective locations (figure 1, reference 18, col. 7 
lines 42-44). 

For claim 3 1, Wong discloses apparatus and method for providing a device level security 
mechanism in a network, the method comprising: 

a computer-readable medium in which program instructions are stored, which 
instructions, when read by a computer, cause the computer to specify a packet filtering criterion 
(figure 5 A, reference 76, col. 5 lines 50-52) and to engender transmission of one or more data 
packets meeting the criterion (figure 2, references 22-1 to 22-6) through the network (figure 1, 
reference 10) from one of the end-points to another (col. 4 lines 45-47), such that at least one of 
the data packets meeting the criterion is intercepted (figure 6, reference step 112) using the 
network agents (figure 1, reference 18) at the respective locations in the network, traversed by 
the packets (col. 7 lines 21-25), which agents record information regarding the at least one 
intercepted packet at the respective locations (figure 6, reference step 120, col. 7 lines 40-41), 
and which instructions further cause the computer to receive and process the recorded 
information so as to analyze a route of the at least one intercepted packet through the network 
(col. 7 lines 46-50). 

However, Wong does not disclose using the network agents at the respective locations in 
the network, intermediate the end-points. In an analogous art, Heddaya et al disclose using the 
network agents (figure 1, references 14) at the respective locations in the network, intermediate 
the end-points (col. 7 lines 20-21). One skilled in the art would have recognized using the 
network agents at the respective locations in the network, intermediate the end-points to use the 
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teachings of Heddaya et al in the system of Wong. Therefore, it would have been obvious to one 
of ordinary skill in the art at the time of the invention, to use the network agents at the respective 
locations in the network, intermediate the end-points as taught by Heddaya et al in Wong's 
system with the motivation being inspected document request message packets as they fly-by 
and intercepted any request for which it may be possible to fulfill by providing a cached 
document instead (col. 7 lines 51-54). 

4. Claims 4-5 and 21 are rejected under 35 U.S.C. 103(a) as being unpatentable over Wong 
(US 6,700,891) in view of Heddaya et al (US 6,622,157) further in view of Coile et al (US 
6,006,268). 

For claims 4-5 and 21, Wong in view of Heddaya et al does not disclose wherein 
specifying the information associated with the data protocol comprises specifying a Transport 
Control Protocol (TCP) sequence number to be assigned to the one or more packets to be 
transmitted. In an analogous art, Coile et al disclose wherein specifying the information 
associated with the data protocol comprises specifying a Transport Control Protocol (TCP) 
sequence number to be assigned to the one or more packets to be transmitted (col. 12 lines 45- 
47). Coile et al disclose further wherein the TCP sequence number comprises an 
acknowledgment sequence number (col. 12 lines 45-47 as set forth in claim 5); wherein the 
information associated with the data protocol comprises a Transport Control Protocol (TCP) 
sequence number used by the at least one traffic agent (col. 12 lines 45-47 as set forth in claim 
21). 

One skilled in the art would have recognized a Transport Control Protocol (TCP) 
sequence number to use the teachings of Coile et al in the system of Wong. Therefore, it would 
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have been obvious to one of ordinary skill in the art at the time of the invention, to use the 
Transport Control Protocol (TCP) sequence number as taught by Coile et al in Wong's system 
with the motivation being function as a serial number that indicates the beginning byte number 
of the data in the packet (col. 12 lines 47-49). 

5. Claims 6, 19 and 22 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Wong (US 6,700,891) in view of Heddaya et al (US 6,622,157) further in view of McKee et al 
(US 5,477,531). 

For claims 6, 19 and 22, Wong in view of Heddaya et al disclose wherein the plurality of 
end-points comprises a source end-point and a destination end-point (figure 1, reference 12, col. 
6 lines 25-29). However, Wong in view of Heddaya et al does not disclose wherein transmitting 
the one or more data packets comprises transmitting original packets from the source end-point 
to the destination end-point, and receiving echo packets returned from the destination end-point, 
both the original and the echo packets meeting the at least one criterion. In an analogous art, 
McKee et al. disclose wherein transmitting the one or more data packets comprises transmitting 
original packets from the source end-point (figure 1, reference 1 1) to the destination end-point 
(figure 1, reference 12, col. 4 lines 7-8), and receiving echo packets returned from the destination 
end-point (figure 1, reference 12, col. 4 lines 9-20), both the original and the echo packets 
meeting the at least one criterion (figure 2, reference blocks 34 and 42, col. 5 lines 22-26 and col. 
5 lines 57-59). 

McKee et al. disclose further wherein the at least one traffic agent comprises first (figure 
1, reference 11) and second traffic agents (figure 1, reference 12) at respective network 
endpoints, and wherein responsive to receiving one of the packets with the pattern of data 
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transmitted by the first traffic agent (figure 1, reference 1 1), the second traffic agent (figure 1, 
reference 12) returns a data packet comprising the pattern of data to the first traffic agent (figure 
2, reference blocks 34 and 42, col. 5 lines 22-26 and col. 5 lines 57-59 as set forth in claim 19); 
wherein the plurality of end-points comprises a source end-point (figure 1, reference 11) and a 
destination end-point figure 1, reference 12), and wherein the one or more data packets meeting 
the criterion comprise original packets sent from the source end-point (reference 1 1) to the 
destination end-point (reference 12, col. 4 lines 7-8) and echo packets returned from the 
destination end-point (reference 12) responsive to the original packets, both the original and the 
echo packets meeting the criterion (figure 2, reference blocks 34 and 42, col. 5 lines 22-26 and 
col. 5 lines 57-59 as set forth in claim 22). 

One skilled in the art would have recognized transmitting original packets from the 
source end-point to the destination end-point, and receiving echo packets returned from the 
destination end-point, both the original and the echo packets meeting the at least one criterion to 
use the teachings of McKee et al. in the system of Wong. Therefore, it would have been obvious 
to one of ordinary skill in the art at the time invention, to use the transmitting original packets 
from the source end-point to the destination end-point, and receiving echo packets returned from 
the destination end-point, both the original and the echo packets meeting the at least one criterion 
as taught by McKee et al. in Wong's system with the motivation being to measure the round trip 
time (Abstract line 8). 

6. Claims 7, 9, 23 and 25 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Wong (US 6,700,891) in view of Heddaya et al (US 6,622,157) further in view of Tarns et al (US 
6,327,620). 
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For claims 7, 9, 23 and 25, Wong in view of Heddaya et al does not disclose wherein the 
network agents comprise Remote Network Monitoring (RMON) elements, in accordance with 
one or more applicable standards defined by the Internet Engineering Task Force (IETF). In an 
analogous art, Tarns et al. disclose wherein the network agents comprise Remote Network 
Monitoring (RMON) elements, in accordance with one or more applicable standards defined by 
the Internet Engineering Task Force (IETF) (col. 2 lines 12-13). Tarns et al. disclose further 
wherein the network agents comprise stand-alone probes (col. 2 lines 15-19 as set forth in claims 
9 and 25). 

One skilled in the art would have recognized Remote Network Monitoring (RMON) 
elements to use the teachings of Tarns et al. in the system of Wong. Therefore, it would have 
been obvious to one of ordinary skill in the art at the time invention, to use the Remote Network 
Monitoring (RMON) elements as taught by Tarns et al. in Wong's system with the motivation 
being to facilitate the monitoring of network activity (col. 2 line 1 1). 



7. Claims 10-14 and 26-29 are objected to as being dependent upon a rejected base claim, 
but would be allowable if rewritten in independent form including all of the limitations of the 
base claim and any intervening claims. 



8. Applicant's arguments with respect to claims 1-3 1 have been considered but are moot in 
view of the new ground(s) of rejection. 



Allowable Subject Matter 



Response to Arguments 



Conclusion 
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9. Applicant's amendment on May 1 8, 2004 necessitated the new ground(s) of rejection 
presented in this Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 
§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 

CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1 . 136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the date of this 
final action. 

Contact Information 

1 0. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Toan D Nguyen whose telephone number is 703-305-0140. The 
examiner can normally be reached on Monday- Friday (7:00AM-4:30PM). 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Mr. Huy Vu can be reached on 703-308-6602. The fax phone number for the 
organization where this application or proceeding is assigned is (703) 872-9306. 

Any inquiry of a general nature or relating to the status of this application or proceeding 
should be directed to the receptionist whose telephone number is 703-305-9600 
TN 
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